SSL access from my apache.

SSL access from my apache.

am 30.11.2006 04:05:05 von Tsurutani Naoki

Hi,

I have a question about ssl_engine_io.c.
On my system of FreeBSD 6-STABLE, apache with following signature is working :
"Apache/2.2.3 (FreeBSD) mod_ssl/2.2.3 OpenSSL/0.9.7e-p1 DAV/2 PHP/4.4.4
with Suhosin-Patch configured".
I found some log entries like
localhost - - [29/Nov/2006:09:54:01 +0900] "GET /" 400 653 "-" "-"
localhost - - [29/Nov/2006:09:54:02 +0900] "GET /" 400 653 "-" "-"
localhost - - [29/Nov/2006:09:54:03 +0900] "GET /" 400 653 "-" "-"
localhost - - [29/Nov/2006:10:43:04 +0900] "GET /" 400 653 "-" "-"
in my log file about ssl access. These entries are not found in normal http access log.
This is caused by ssl_io_filter_disable() function in modules/ssl/ssl_engine_io.c,
as I think, and I have no idea why these accesses are necessary.
Referencing to http access log, many accesses are found just before this log's timestamp,
but they were not about ssl (I checked firewall log and found no entries about tcp/443).
These logs were not found with apache-2.0.x before 1 year ago.

I want to know why this access occures.
Please tell me.
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

Re: SSL access from my apache.

am 04.12.2006 07:43:27 von Yvo van Doorn

------=_Part_25414_8625954.1165214607840
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

You'll probably have better luck going to the httpd users mailing list
(found at http://httpd.apache.org) as opposed to this one as this mod_ssl is
developed for apache 1.x not apache 2.x

On 11/29/06, Tsurutani Naoki wrote:
>
> Hi,
>
> I have a question about ssl_engine_io.c.
> On my system of FreeBSD 6-STABLE, apache with following signature is
> working :
> "Apache/2.2.3 (FreeBSD) mod_ssl/2.2.3 OpenSSL/0.9.7e-p1 DAV/2
> PHP/4.4.4
> with Suhosin-Patch configured".
> I found some log entries like
> localhost - - [29/Nov/2006:09:54:01 +0900] "GET /" 400 653 "-" "-"
> localhost - - [29/Nov/2006:09:54:02 +0900] "GET /" 400 653 "-" "-"
> localhost - - [29/Nov/2006:09:54:03 +0900] "GET /" 400 653 "-" "-"
> localhost - - [29/Nov/2006:10:43:04 +0900] "GET /" 400 653 "-" "-"
> in my log file about ssl access. These entries are not found in normal
> http access log.
> This is caused by ssl_io_filter_disable() function in
> modules/ssl/ssl_engine_io.c,
> as I think, and I have no idea why these accesses are necessary.
> Referencing to http access log, many accesses are found just before this
> log's timestamp,
> but they were not about ssl (I checked firewall log and found no entries
> about tcp/443).
> These logs were not found with apache-2.0.x before 1 year ago.
>
> I want to know why this access occures.
> Please tell me.
> ____________________________________________________________ __________
> Apache Interface to OpenSSL (mod_ssl) www.modssl.org
> User Support Mailing List modssl-users@modssl.org
> Automated List Manager majordomo@modssl.org
>

------=_Part_25414_8625954.1165214607840
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

You'll probably have better luck going to the httpd users mailing list (found at ) as opposed to this one as this mod_ssl is developed for apache 1.x not apache
2.x

On 11/29/06, Tsurutani Naoki <> wrote:

Hi,

I have a question about ssl_engine_io.c.
On my system of FreeBSD 6-STABLE, apache with following signature is working :
        "Apache/2.2.3 (FreeBSD) mod_ssl/2.2.3 OpenSSL/0.9.7e-p1 DAV/2 PHP/4.4.4

         with Suhosin-Patch configured".
I found some log entries like
        localhost - - [29/Nov/2006:09:54:01 +0900] "GET /" 400 653 "-" "-"
        localhost - - [29/Nov/2006:09:54:02 +0900] "GET /" 400 653 "-" "-"

        localhost - - [29/Nov/2006:09:54:03 +0900] "GET /" 400 653 "-" "-"
        localhost - - [29/Nov/2006:10:43:04 +0900] "GET /" 400 653 "-" "-"
in my log file about ssl access. These entries are not found in normal http access log.

This is caused by ssl_io_filter_disable() function in modules/ssl/ssl_engine_io.c,
as I think, and I have no idea why these accesses are necessary.
Referencing to http access log, many accesses are found just before this log's timestamp,

but they were not about ssl (I checked firewall log and found no entries about tcp/443).
These logs were not found with apache-2.0.x before 1 year ago.

I want to know why this access occures.
Please tell me.

____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl)                  
User Support Mailing List                      




------=_Part_25414_8625954.1165214607840--
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

Re: SSL access from my apache.

am 04.12.2006 09:42:51 von Adrian Bridgett

On Sun, Dec 3, 2006 at 22:43:27 -0800 (-0800), Yvo van Doorn wrote:
> You'll probably have better luck going to the httpd users mailing
> list
> (found at http://httpd.apache.org) as opposed to this one as this
> mod_ssl is
> developed for apache 1.x not apache 2.x

Ah, many thanks!

Adrian
--
Adrian Bridgett - adrian@smop.co.uk
GPG key available on public key servers
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org